Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa
File:                     f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa (raw, json)
Hash identifier:          A2At+A9SjqnLa6o5TPZ2znU6T6ZErjdVhFBK/TbyWtg=
Subject key identifier:   AA:E2:CC:81:7B:4D:3B:2A:A7:45:24:2D:32:16:38:07:35:F5:F8:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA255B4EC10C5D7C0652C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     38266
IP address blocks:        23.11.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:25:5b:4e:c1:0c:5d:7c:06:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=32c86029-b334-4f84-aff4-1d80e6d46b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:39:1d:55:55:b5:8c:e0:ef:8e:32:a7:d7:
                    92:85:29:78:b7:7d:60:5d:2d:ce:bd:a7:d3:08:89:
                    65:5e:d3:39:b6:5a:0f:a7:a0:55:c6:15:71:56:96:
                    a7:fb:95:3b:bc:c4:86:99:f7:ae:33:ca:4e:fa:aa:
                    9c:02:b6:6e:49:be:67:dc:c3:9c:6d:38:bf:20:61:
                    30:17:00:9e:2b:44:5b:de:f4:1a:d6:ce:b5:69:f7:
                    c3:e8:18:3a:bc:68:57:70:90:09:81:7c:5c:31:fa:
                    83:99:8c:15:6a:b4:f2:e6:1d:0d:97:d0:0f:eb:e8:
                    14:35:da:af:6b:63:71:e5:0b:69:b8:05:ac:5f:73:
                    3c:3c:6d:70:12:93:7f:16:36:77:4d:13:8f:1f:eb:
                    95:3b:38:3c:3f:29:22:2b:d7:63:38:e8:4d:95:83:
                    2d:2a:44:a1:06:7a:3a:43:fb:9e:86:a5:f3:0f:fd:
                    d8:30:95:c8:2e:6a:60:bb:11:2c:0b:18:1b:2b:2f:
                    07:85:64:66:bd:c7:b2:32:24:c8:0d:ad:85:86:7d:
                    f4:7b:0a:b8:ae:b6:3c:7d:03:39:b9:42:1b:f9:92:
                    42:ec:83:ae:0a:52:fa:a1:67:74:8a:39:4c:31:3f:
                    6c:cb:53:c5:5c:69:e3:03:3b:e5:b5:47:ba:44:3e:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E2:CC:81:7B:4D:3B:2A:A7:45:24:2D:32:16:38:07:35:F5:F8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.11.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:18:6f:44:54:7f:71:9b:5d:f7:d4:d2:00:b0:d9:5b:48:
         7f:12:09:16:b4:e9:29:0f:ae:91:b0:09:17:9b:10:04:49:31:
         88:78:f3:e4:63:b8:3f:eb:53:f1:21:8d:bc:15:a5:0b:c2:d7:
         ad:d2:c4:99:0f:ab:28:52:86:87:72:88:60:72:6e:16:b9:2d:
         80:e3:e5:69:3a:35:a8:c4:fa:30:8f:19:60:01:64:f0:8f:be:
         07:7c:db:b7:4d:50:81:69:ba:fb:aa:b4:2c:ce:5d:de:84:57:
         63:99:1b:ee:7c:e6:4a:c7:27:05:a9:61:2a:b9:d1:4a:5d:7e:
         2c:b1:cb:7f:73:1a:14:59:86:06:68:81:89:06:ec:40:63:bc:
         cf:ef:ab:14:15:31:d7:29:29:69:c1:67:ea:11:b6:d8:b6:76:
         c7:55:c0:00:6b:59:34:ec:02:42:e0:b2:2c:ba:09:52:05:e5:
         4b:bf:15:22:c1:7b:5e:90:b4:4a:7d:9a:79:06:a7:55:a5:b4:
         af:c0:2b:20:7c:af:af:d2:ad:73:a7:af:dc:bf:d2:f9:13:61:
         fb:87:64:c2:01:4f:7d:c9:a2:a5:60:2d:0a:78:8a:15:80:ed:
         34:84:c6:5f:20:2d:99:3b:06:e7:99:0e:75:77:2a:2e:80:8a:
         b1:a0:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:57 2026 by rpki-client